-
Hello asimoomatia,
Thank you for sharing your thoughts on this item.
What allows us to conclude that TDNSG1 is associated with TD2 is the way the scenario is constructed: the NSG rules explicitly reference 10.0.2.0/24 as the destination. NSGs only filter traffic when they’re applied to a subnet or NIC. Since the rules are scoped to TD2’s subnet, the only way those rules would be evaluated is if TDNSG1 is indeed associated with TD2’s NIC (or its subnet).
Please refer to this: https://learn.microsoft.com/en-us/azure/virtual-network/network-security-group-how-it-works
I hope this helps! Let us know if you need further assistance.
Regards,
JR @ Tutorials Dojo
